| Commit message (Collapse) | Author | Age | Files | Lines |
|
|
|
|
|
|
|
| |
Legally incredibly dubious, particularly since we don't follow it
strictly as policy, and we have git history instead, which does it right.
This is just a waste of time and a cargo cult.
Signed-off-by: Lamont Granquist <lamont@scriptkiddie.org>
|
|
|
|
|
|
| |
This is actually a subclass of the mac user provider and not the Plist gem. This is a super confusing name btw. Plist passed Plist, but it's a different Plist.
Signed-off-by: Tim Smith <tsmith@chef.io>
|
|
|
|
| |
Signed-off-by: Tim Smith <tsmith@chef.io>
|
|
|
|
| |
Signed-off-by: Tim Smith <tsmith@chef.io>
|
|
|
|
| |
Signed-off-by: Vivek Singh <vivek.singh@msystechnologies.com>
|
|
|
|
| |
Signed-off-by: Vivek Singh <vivek.singh@msystechnologies.com>
|
|
|
|
| |
Signed-off-by: Lamont Granquist <lamont@scriptkiddie.org>
|
|
|
|
|
|
| |
doesn't exist in the user record
Signed-off-by: Joseph Chilcote <chilcote@fb.com>
|
|
|
|
| |
Signed-off-by: Joseph Chilcote <chilcote@fb.com>
|
|
|
|
| |
Signed-off-by: Joseph Chilcote <chilcote@fb.com>
|
|
|
|
|
|
|
| |
mac_user will now use the numeric GID when creating a user, and
adds support for `system true`
Signed-off-by: Joseph Chilcote <chilcote@fb.com>
|
|
|
|
|
| |
This will clear the password flags when the password is set for this user. This ensures that the user will not be prompted to change their password on next login.
Signed-off-by: Aron List <aronotmar@live.nl>
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
We need more defensive coding around the absense of the ShadowData.
Unfortunately I wasn't able to fix the tests on my mac where this
happens, and don't know how to introduce tests that would fail on
buildkite, so we have no coverage for this. Testing was done
manually on the CLI.
Also removed some useless converge_by statements that were
effectively double-logging. The methods that the converge_by's
were in are already wrapped by converge_by's in the superclass
so the resource is already "dirty" in the sense that it knows
that it is being updated, and the log message that e.g. the
user is being removed is already being printed. Some of the
sub-action logging with sub-converge_by's here is still good
since it shows the details of how the user is being added or
removed or modified which makes sense (still sort of abusing
converge_by to get only logging, but that doesn't matter because
we're in a block where we MUST be updating the resource anyway).
This commit also re-adds testing of unit+integration testing to the
omnibus pipeline.
Signed-off-by: Lamont Granquist <lamont@scriptkiddie.org>
|
|
|
|
|
|
| |
code 12
Signed-off-by: Jonathan Jones <gitmaster@thespooky.house>
|
|
|
|
| |
Signed-off-by: Jonathan Jones <gitmaster@thespooky.house>
|
|
|
|
| |
Signed-off-by: Jonathan Jones <gitmaster@thespooky.house>
|
|
|
|
| |
Signed-off-by: Jonathan Jones <gitmaster@thespooky.house>
|
|
|
|
| |
Signed-off-by: Jonathan Jones <gitmaster@thespooky.house>
|
|
|
|
|
|
| |
Resolved new method in linux_user not returning the correct array.
Signed-off-by: Jonathan Jones <gitmaster@thespooky.house>
|
|
|
|
| |
Signed-off-by: Jonathan Jones <gitmaster@thespooky.house>
|
|
|
|
|
|
|
|
|
| |
action method s
hell_out reference. This fixes an issue related to certain commands returning non-0 exit codes but still functioning
as exptected
Signed-off-by: Jonathan Jones <gitmaster@thespooky.house>
|
|
|
|
| |
Signed-off-by: Ryan Cragun <ryan@chef.io>
|
|
|
|
| |
Signed-off-by: Ryan Cragun <ryan@chef.io>
|
|
|
|
| |
Signed-off-by: Ryan Cragun <ryan@chef.io>
|
|
|
|
| |
Signed-off-by: Ryan Cragun <ryan@chef.io>
|
|
|
|
| |
Signed-off-by: Ryan Cragun <ryan@chef.io>
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
* Fix 'iterations' description
* Update 'gid' property, remove coercion, resolve group name and id in
provider
* Move validation of password value when given salt to resource property
coercion
* Restructure exception handling around calls
* Don't re-map properties onto current_resource after
load_current_resource
* Execute inline group resources with run_action
* Always set the home directory when creating a user
* Poll for user creating instead of a hard sleep
* Remove old ascii encoding copy pasta
Signed-off-by: Ryan Cragun <ryan@chef.io>
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Provide a user resource that is compatible with default TCC restrictions
that were introduced in macOS 10.14.
Changes:
* This resource and the corresponding provider have been modified to
work with default macOS TCC policies. Direct access to user binary
plists are no longer permitted by default, thus we've chosen to use
use newer methods of creating, modifying and removing users.
* Due to the tooling required by the provider this provider is only
suitable for use on macOS >= 10.14. Support for older platforms has
been removed.
New Features:
* Primary group management is now included.
* 'admin' is now a boolean property that configures a user to an admin.
* 'admin_username' and 'admin_password' are new properties that define the
admin user credentials required for toggling SecureToken for an
exiting user.
The 'admin_username' must correspond to a system admin with SecureToken
enabled in order to toggle SecureToken.
* 'secure_token' is a boolean property that sets the desired state
for SecureToken. SecureToken token is required for FileVault full
disk encryption.
Signed-off-by: Ryan Cragun <ryan@chef.io>
|
|
|
|
|
|
| |
since we use double quotes, be consistent everywhere.
Signed-off-by: Lamont Granquist <lamont@scriptkiddie.org>
|
|
|
|
|
|
|
| |
given how many regexps we have with /'s in the match this seems like
a very good one.
Signed-off-by: Lamont Granquist <lamont@scriptkiddie.org>
|
|
|
|
|
|
| |
start enforcing using %i{} instead of arrays of symbols
Signed-off-by: Lamont Granquist <lamont@scriptkiddie.org>
|
|
|
|
|
|
|
| |
i like this one, gives visual priority to returns or raises that are
buried in the middle of things.
Signed-off-by: Lamont Granquist <lamont@scriptkiddie.org>
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
this is using:
Layout/AlignArguments:
Enabled: true
EnforcedStyle: with_fixed_indentation
the default style can use really excessive whitespace. on starting
lines which are already long, it fully indents across to where the
arguments start and then begins the line there.
Signed-off-by: Lamont Granquist <lamont@scriptkiddie.org>
|
|
|
|
|
|
|
|
|
| |
Stops the kernel from scanning through all the activated gems every time in order
to resolve names into pathnames.
See rubygems/rubygems#2762
Signed-off-by: Lamont Granquist <lamont@scriptkiddie.org>
|
|
|
|
| |
Signed-off-by: Lamont Granquist <lamont@scriptkiddie.org>
|
|
|
|
| |
Signed-off-by: Lamont Granquist <lamont@scriptkiddie.org>
|
|
|
|
|
|
|
| |
This gives a speed boost since rubygems does not have to scan through
every gem in the gemset in order to find the file.
Signed-off-by: Lamont Granquist <lamont@scriptkiddie.org>
|
|
|
|
|
|
| |
This worked until I moved the interations property into the dscl_user resource directly.
Signed-off-by: Tim Smith <tsmith@chef.io>
|
|
|
|
| |
Signed-off-by: Tim Smith <tsmith@chef.io>
|
|
|
|
|
|
| |
More cleanup
Signed-off-by: Tim Smith <tsmith@chef.io>
|
|
|
|
|
|
| |
We can greatly simplify our dscl user provider by removing support for macOS 10.7 and 10.7 which has been upgraded to 10.8. No one is using this anyone as it's beyond EOL with Apple and has been for years.
Signed-off-by: Tim Smith <tsmith@chef.io>
|
|
|
|
| |
Signed-off-by: vasu1105 <vasundhara.jagdale@msystechnologies.com>
|
|
|
|
| |
Signed-off-by: NAshwini <ashwini.nehate@msystechnologies.com>
|
|
|
|
|
|
| |
the dscl user provider uses mixin/shell_out instead and the specs don't seem to use mixlib/shellout or actually need the require.
Signed-off-by: Tim Smith <tsmith@chef.io>
|
|
|
|
| |
Signed-off-by: Lamont Granquist <lamont@scriptkiddie.org>
|
|
|
|
| |
Signed-off-by: Lamont Granquist <lamont@scriptkiddie.org>
|
|
|
|
|
|
|
| |
converts all usage to just shell_out() from the numerous helper
utilities that we've had previously.
Signed-off-by: Lamont Granquist <lamont@scriptkiddie.org>
|
|\
| |
| | |
Cleanup AIX and Solaris user resources.
|
| |
| |
| |
| | |
Signed-off-by: Lamont Granquist <lamont@scriptkiddie.org>
|
| |
| |
| |
| | |
Signed-off-by: Lamont Granquist <lamont@scriptkiddie.org>
|